Author: Marcus Krause
TYPO3-EXT-SA-2013-016: SQL Injection vulnerability in extension Formhandler (formhandler)
It has been discovered that the extension "Formhandler" (formhandler) is vulnerable to SQL-Injection.
Read moreTYPO3-EXT-SA-2013-015: SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)
It has been discovered that the extension "RealURL: speaking paths for TYPO3" (realurl) is vulnerable to SQL-Injection.
TYPO3-EXT-SA-2013-014: Information Disclosure in extension Direct Mail (direct_mail)
It has been discovered that the extension "Direct Mail" (direct mail) is susceptible to Information Disclosure
TYPO3-EXT-SA-2013-009: Several vulnerabilities in extension Apache Solr for TYPO3 (solr)
It has been discovered that the extension "Apache Solr for TYPO3" (solr) is vulnerable to Cross-Site Scripting and Insecure Unserialize.
TYPO3-EXT-SA-2013-013: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: browser, ke_search, locator, realurlmanagement, wfqbe
TYPO3-EXT-SA-2013-012: Several vulnerabilities in extension Formhandler (formhandler)
It has been discovered that the extension "Formhandler" (Formhandler) is vulnerable to SQL-Injection, Arbitrary Code Execution and Authentication Bypass.
TYPO3-EXT-SA-2013-011: Cross-Site Scripting vulnerability in extension Front End User Registration (sr_feuser_register)
It has been discovered that the extension "Front End User Registration" (sr_feuser_register) is vulnerable to Cross-Site Scripting.
TYPO3-EXT-SA-2013-010: SQL Injection vulnerability in extension Multishop (multishop)
It has been discovered that the extension "Multishop" (multishop) is vulnerable to SQL-Injection.
TYPO3-EXT-SA-2013-007: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: accessible_is_browse_results, maag_formcaptcha, meta_feedit, rzautocomplete, sb_folderdownload, sg_zfelib, sg_zlib, tq_seo
TYPO3-EXT-SA-2013-006: Security Bypass Vulnerability in extension powermail (powermail)
It has been discovered that the extension "powermail" (powermail) is susceptible to Security Bypass Vulnerability.